| タイトル | prasathmani TinyFileManager <=2.6 Unrestricted Upload |
|---|
| 説明 | A vulnerability has been identified in the remote URL file upload module that allows an authenticated user with file upload privileges to upload files with a disallowed extension (e.g. .php), bypassing the configured whitelist defined by FM_UPLOAD_EXTENSION.
The issue is caused by the order of operations: extension validation is performed on the "dirty" filename (including the query string), while the file is saved using the "clean" filename (after removing the query string). |
|---|
| ソース | ⚠️ https://drive.google.com/file/d/1db5JeUDltknuzWMaFQB0cYYDVpmFWpl7/view |
|---|
| ユーザー | argh (UID 101260) |
|---|
| 送信 | 2026年09月22日 01:47 (1 月 ago) |
|---|
| モデレーション | 2026年10月24日 15:46 (1 month later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 426120 [prasathmani TinyFileManager 迄 2.6 Remote URL File Upload tinyfilemanager.php 特権昇格] |
|---|
| ポイント | 20 |
|---|